Woodchuck

This utility parses logfiles from any UNIX system, and prints out any lines which don't fit into user-defined regular expressions. That way, anything out of the ordinary will be printed. Great for discovering unusual activity on a system.

The recommended way of using this program is running it from cron on a daily basis and e-mailing the output to the system admin who can then look at the unusual entries in more detail. The crontab might look like:

30 4 * * * /usr/local/bin/woodchuck |mail -s "Unusual logfile entries" root@host

This is written in Perl.